CVE-2023-36501

creationtimestamp| type| source ---|---|--- 2023-07-25 18:26:57+00:00| seen| https://t.me/cibsecurity/67242...

CVE-2023-36501

The CVE-2023-36501 entry concerns the WordPress teachPress plugin (affected versions ≤ 9.0.2) and describes an unauthenticated, reflected Cross-Site Scripting (XSS) vulnerability via meta_field_id and cite_id. The issue is confirmed in multiple sources (Patchstack and CVE/NVD references) with a r...

WordPress teachPress Plugin <= 9.0.2 is vulnerable to Cross Site Scripting (XSS)

Software teachPress Type Plugin Vulnerable versions = 9.0.2 Fixed in 9.0.3 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-36501 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID cec894d7c58b Credits Le Ngoc Anh Required...